@aws-sdk/client-fms 3.556.0 → 3.564.0

package/dist-types/ts3.4/models/models_0.d.ts

@@ -39,6 +39,7 @@ export interface OrganizationalUnitScope {
 export declare const SecurityServiceType: {
   readonly DNS_FIREWALL: "DNS_FIREWALL";
   readonly IMPORT_NETWORK_FIREWALL: "IMPORT_NETWORK_FIREWALL";
+  readonly NETWORK_ACL_COMMON: "NETWORK_ACL_COMMON";
   readonly NETWORK_FIREWALL: "NETWORK_FIREWALL";
   readonly SECURITY_GROUPS_COMMON: "SECURITY_GROUPS_COMMON";
   readonly SECURITY_GROUPS_CONTENT_AUDIT: "SECURITY_GROUPS_CONTENT_AUDIT";
@@ -248,6 +249,7 @@ export declare const ViolationReason: {
   readonly FirewallSubnetMissingVPCEndpoint: "FIREWALL_SUBNET_MISSING_VPCE_ENDPOINT";
   readonly InternetGatewayMissingExpectedRoute: "INTERNET_GATEWAY_MISSING_EXPECTED_ROUTE";
   readonly InternetTrafficNotInspected: "INTERNET_TRAFFIC_NOT_INSPECTED";
+  readonly InvalidNetworkAclEntry: "INVALID_NETWORK_ACL_ENTRY";
   readonly InvalidRouteConfiguration: "INVALID_ROUTE_CONFIGURATION";
   readonly MissingExpectedRouteTable: "MISSING_EXPECTED_ROUTE_TABLE";
   readonly MissingFirewall: "MISSING_FIREWALL";
@@ -313,6 +315,38 @@ export interface ResourceTag {
   Key: string | undefined;
   Value?: string;
 }
+export interface NetworkAclIcmpTypeCode {
+  Code?: number;
+  Type?: number;
+}
+export interface NetworkAclPortRange {
+  From?: number;
+  To?: number;
+}
+export declare const NetworkAclRuleAction: {
+  readonly ALLOW: "allow";
+  readonly DENY: "deny";
+};
+export type NetworkAclRuleAction =
+  (typeof NetworkAclRuleAction)[keyof typeof NetworkAclRuleAction];
+export interface NetworkAclEntry {
+  IcmpTypeCode?: NetworkAclIcmpTypeCode;
+  Protocol: string | undefined;
+  PortRange?: NetworkAclPortRange;
+  CidrBlock?: string;
+  Ipv6CidrBlock?: string;
+  RuleAction: NetworkAclRuleAction | undefined;
+  Egress: boolean | undefined;
+}
+export interface NetworkAclEntrySet {
+  FirstEntries?: NetworkAclEntry[];
+  ForceRemediateForFirstEntries: boolean | undefined;
+  LastEntries?: NetworkAclEntry[];
+  ForceRemediateForLastEntries: boolean | undefined;
+}
+export interface NetworkAclCommonPolicy {
+  NetworkAclEntrySet: NetworkAclEntrySet | undefined;
+}
 export declare const FirewallDeploymentModel: {
   readonly CENTRALIZED: "CENTRALIZED";
   readonly DISTRIBUTED: "DISTRIBUTED";
@@ -328,6 +362,7 @@ export interface ThirdPartyFirewallPolicy {
 export interface PolicyOption {
   NetworkFirewallPolicy?: NetworkFirewallPolicy;
   ThirdPartyFirewallPolicy?: ThirdPartyFirewallPolicy;
+  NetworkAclCommonPolicy?: NetworkAclCommonPolicy;
 }
 export interface SecurityServicePolicyData {
   Type: SecurityServiceType | undefined;
@@ -499,6 +534,39 @@ export interface FirewallSubnetMissingVPCEndpointViolation {
   SubnetAvailabilityZone?: string;
   SubnetAvailabilityZoneId?: string;
 }
+export declare const EntryType: {
+  readonly CustomEntry: "CUSTOM_ENTRY";
+  readonly FMSManagedFirstEntry: "FMS_MANAGED_FIRST_ENTRY";
+  readonly FMSManagedLastEntry: "FMS_MANAGED_LAST_ENTRY";
+};
+export type EntryType = (typeof EntryType)[keyof typeof EntryType];
+export interface EntryDescription {
+  EntryDetail?: NetworkAclEntry;
+  EntryRuleNumber?: number;
+  EntryType?: EntryType;
+}
+export declare const EntryViolationReason: {
+  readonly EntryConflict: "ENTRY_CONFLICT";
+  readonly IncorrectEntryOrder: "INCORRECT_ENTRY_ORDER";
+  readonly MissingExpectedEntry: "MISSING_EXPECTED_ENTRY";
+};
+export type EntryViolationReason =
+  (typeof EntryViolationReason)[keyof typeof EntryViolationReason];
+export interface EntryViolation {
+  ExpectedEntry?: EntryDescription;
+  ExpectedEvaluationOrder?: string;
+  ActualEvaluationOrder?: string;
+  EntryAtExpectedEvaluationOrder?: EntryDescription;
+  EntriesWithConflicts?: EntryDescription[];
+  EntryViolationReasons?: EntryViolationReason[];
+}
+export interface InvalidNetworkAclEntriesViolation {
+  Vpc?: string;
+  Subnet?: string;
+  SubnetAvailabilityZone?: string;
+  CurrentAssociatedNetworkAcl?: string;
+  EntryViolations?: EntryViolation[];
+}
 export declare const DestinationType: {
   readonly IPV4: "IPV4";
   readonly IPV6: "IPV6";
@@ -652,6 +720,23 @@ export interface NetworkFirewallUnexpectedGatewayRoutesViolation {
   RouteTableId?: string;
   VpcId?: string;
 }
+export interface CreateNetworkAclAction {
+  Description?: string;
+  Vpc?: ActionTarget;
+  FMSCanRemediate?: boolean;
+}
+export interface CreateNetworkAclEntriesAction {
+  Description?: string;
+  NetworkAclId?: ActionTarget;
+  NetworkAclEntriesToBeCreated?: EntryDescription[];
+  FMSCanRemediate?: boolean;
+}
+export interface DeleteNetworkAclEntriesAction {
+  Description?: string;
+  NetworkAclId?: ActionTarget;
+  NetworkAclEntriesToBeDeleted?: EntryDescription[];
+  FMSCanRemediate?: boolean;
+}
 export interface EC2AssociateRouteTableAction {
   Description?: string;
   RouteTableId: ActionTarget | undefined;
@@ -700,6 +785,12 @@ export interface FMSPolicyUpdateFirewallCreationConfigAction {
   Description?: string;
   FirewallCreationConfig?: string;
 }
+export interface ReplaceNetworkAclAssociationAction {
+  Description?: string;
+  AssociationId?: ActionTarget;
+  NetworkAclId?: ActionTarget;
+  FMSCanRemediate?: boolean;
+}
 export interface RemediationAction {
   Description?: string;
   EC2CreateRouteAction?: EC2CreateRouteAction;
@@ -710,6 +801,10 @@ export interface RemediationAction {
   EC2AssociateRouteTableAction?: EC2AssociateRouteTableAction;
   EC2CreateRouteTableAction?: EC2CreateRouteTableAction;
   FMSPolicyUpdateFirewallCreationConfigAction?: FMSPolicyUpdateFirewallCreationConfigAction;
+  CreateNetworkAclAction?: CreateNetworkAclAction;
+  ReplaceNetworkAclAssociationAction?: ReplaceNetworkAclAssociationAction;
+  CreateNetworkAclEntriesAction?: CreateNetworkAclEntriesAction;
+  DeleteNetworkAclEntriesAction?: DeleteNetworkAclEntriesAction;
 }
 export interface RemediationActionWithOrder {
   RemediationAction?: RemediationAction;
@@ -774,13 +869,14 @@ export interface ResourceViolation {
   DnsRuleGroupPriorityConflictViolation?: DnsRuleGroupPriorityConflictViolation;
   DnsDuplicateRuleGroupViolation?: DnsDuplicateRuleGroupViolation;
   DnsRuleGroupLimitExceededViolation?: DnsRuleGroupLimitExceededViolation;
-  PossibleRemediationActions?: PossibleRemediationActions;
   FirewallSubnetIsOutOfScopeViolation?: FirewallSubnetIsOutOfScopeViolation;
   RouteHasOutOfScopeEndpointViolation?: RouteHasOutOfScopeEndpointViolation;
   ThirdPartyFirewallMissingFirewallViolation?: ThirdPartyFirewallMissingFirewallViolation;
   ThirdPartyFirewallMissingSubnetViolation?: ThirdPartyFirewallMissingSubnetViolation;
   ThirdPartyFirewallMissingExpectedRouteTableViolation?: ThirdPartyFirewallMissingExpectedRouteTableViolation;
   FirewallSubnetMissingVPCEndpointViolation?: FirewallSubnetMissingVPCEndpointViolation;
+  InvalidNetworkAclEntriesViolation?: InvalidNetworkAclEntriesViolation;
+  PossibleRemediationActions?: PossibleRemediationActions;
 }
 export interface ViolationDetail {
   PolicyId: string | undefined;

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@aws-sdk/client-fms",
   "description": "AWS SDK for JavaScript Fms Client for Node.js, Browser and React Native",
-  "version": "3.556.0",
+  "version": "3.564.0",
   "scripts": {
     "build": "concurrently 'yarn:build:cjs' 'yarn:build:es' 'yarn:build:types'",
     "build:cjs": "node ../../scripts/compilation/inline client-fms",
@@ -20,9 +20,8 @@
   "dependencies": {
     "@aws-crypto/sha256-browser": "3.0.0",
     "@aws-crypto/sha256-js": "3.0.0",
-    "@aws-sdk/client-sts": "3.556.0",
     "@aws-sdk/core": "3.556.0",
-    "@aws-sdk/credential-provider-node": "3.556.0",
+    "@aws-sdk/credential-provider-node": "3.564.0",
     "@aws-sdk/middleware-host-header": "3.535.0",
     "@aws-sdk/middleware-logger": "3.535.0",
     "@aws-sdk/middleware-recursion-detection": "3.535.0",